Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa
File:                     652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa (raw, json)
Hash identifier:          c/pWGSAL7HxKWHQr7XYB/voQURSf95Rb23V0vJ/UfDA=
Subject key identifier:   69:98:CE:73:DA:20:53:AD:D1:50:DC:6E:BE:7C:F5:12:B2:BF:05:7F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2646DCF3D65C512E5AABC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa
Signing time:             Mon 03 Feb 2025 11:16:04 +0000
ROA not before:           Mon 03 Feb 2025 11:16:04 +0000
ROA not after:            Sun 04 May 2025 10:16:04 +0000
asID:                     30036
IP address blocks:        2604:2e88:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:6d:cf:3d:65:c5:12:e5:aa:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:16:04 2025 GMT
            Not After : May  4 10:16:04 2025 GMT
        Subject: CN=d24aa0aa-d84c-4735-80d4-90e81c005196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:f0:ed:30:01:72:96:ed:34:14:91:fc:79:
                    24:7c:80:1c:0e:68:54:6e:3b:45:0c:bd:bc:62:e6:
                    73:ee:a0:c4:c3:6c:17:b0:2e:aa:e5:26:97:e8:50:
                    2f:9b:29:d6:0a:a0:0d:66:0d:04:4b:4c:03:79:f3:
                    57:db:46:a6:27:99:40:79:a1:7a:94:d9:01:a2:2f:
                    91:b9:0e:04:4c:2a:96:2f:b8:d6:dd:8f:d2:19:9a:
                    f3:fc:7b:a9:8a:50:ec:4f:93:aa:e4:b2:73:7b:82:
                    10:1a:b5:c5:68:68:6c:01:21:a4:c9:d6:3d:fa:b6:
                    fd:ae:99:78:8d:e4:79:fb:fe:54:13:86:00:67:84:
                    fb:c1:75:10:12:21:5a:c7:0c:2e:b3:9f:f2:18:8a:
                    d0:ac:53:08:da:d6:58:65:08:7e:a3:02:67:20:3b:
                    ed:fa:c9:57:85:03:11:78:fc:39:dd:e3:42:a5:f3:
                    41:f4:e4:ff:3c:c1:2d:49:33:e7:06:08:8c:94:ef:
                    76:a5:9e:56:2d:46:de:d0:a4:99:e9:e9:67:dd:bb:
                    0c:0f:0f:72:d8:96:88:9a:9e:2f:32:f0:06:83:78:
                    fe:b1:45:8c:e9:c6:d5:c3:02:4b:5e:16:b6:7c:8f:
                    fd:16:f6:55:bc:2f:b1:42:a1:e9:27:47:96:e1:62:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:CE:73:DA:20:53:AD:D1:50:DC:6E:BE:7C:F5:12:B2:BF:05:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:14:0c:64:69:d5:3a:e1:d8:44:d5:ff:88:58:06:fd:66:
         61:76:92:46:a0:f2:83:ab:d2:0d:48:da:27:8a:d2:d8:c4:94:
         2f:14:5c:46:db:04:b6:3d:24:bd:43:ef:fa:5b:37:9c:4d:dc:
         46:90:0e:6e:92:f9:fd:4f:74:11:f3:0e:f4:37:11:ce:62:4a:
         64:13:34:d3:08:03:a6:46:fa:f4:b0:c8:c2:64:00:d3:7a:a5:
         62:ce:bc:03:69:33:7f:45:62:4d:d7:24:3a:56:6f:6b:bb:06:
         a7:95:12:ba:7a:c8:29:af:14:6d:56:25:62:4a:d5:48:78:cc:
         fb:fa:cb:26:55:2e:49:92:65:30:6a:af:1d:5c:be:f8:ad:50:
         85:5b:2f:3e:73:08:48:46:91:52:13:68:bf:bc:a4:fb:7b:89:
         d1:52:d7:a5:e9:a3:b7:dc:0e:18:c8:69:88:27:02:d5:dc:3c:
         53:b3:a3:81:9e:8f:85:6f:19:6b:23:51:40:40:eb:1c:57:83:
         8b:ff:7b:c3:b3:a9:70:4e:2c:2d:96:28:cf:b7:5b:30:4c:72:
         e1:e4:2b:cd:c7:fc:9c:8b:0a:af:31:af:06:37:0b:fe:f8:f1:
         12:ed:fd:3e:67:6c:da:a0:ea:79:cf:5a:5e:5a:87:82:04:2b:
         bf:e4:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:45 2025 by rpki-client